Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/559d63-afb3-41aa-b216-92f03d3dd412/1/tvPx-G3UyqCws3yYuhKCUKpJR0U.mft
File: tvPx-G3UyqCws3yYuhKCUKpJR0U.mft (raw, json)
Hash identifier: lnBdDfKTNv1f7kyAqxK/Va/FSkg3woIIDI26ZE1uPIk=
Subject key identifier: D9:C9:33:29:AF:00:B8:CB:62:D2:04:A2:5E:2A:A7:3D:BA:7B:C7:96
Authority key identifier: B6:F3:F1:F8:6D:D4:CA:A0:B0:B3:7C:98:BA:12:82:50:AA:49:47:45
Certificate issuer: /CN=b6f3f1f86dd4caa0b0b37c98ba128250aa494745
Certificate serial: 01A0CA7D92ADBFB7332B5CCD39139A11D96F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvPx-G3UyqCws3yYuhKCUKpJR0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/559d63-afb3-41aa-b216-92f03d3dd412/1/tvPx-G3UyqCws3yYuhKCUKpJR0U.mft
Manifest number: 63
Signing time: Tue 22 Sep 2026 19:00:22 +0000
Manifest this update: Tue 22 Sep 2026 19:00:22 +0000
Manifest next update: Wed 23 Sep 2026 19:00:22 +0000
Files and hashes: 1: Du0TfAsYdMk0CJ2zqvUFpo0-qyQ.roa (hash: 9sKSx901oDe++es16PvLgOI1pRTpkLDtrTtxAUjUzXA=)
2: GRZQfICaPZkmlWt-Zi18iyQthto.roa (hash: 5+2pbzTpQ4n5mUGa2nh7fMPzxd0iARQ9e60Moilj36g=)
3: tvPx-G3UyqCws3yYuhKCUKpJR0U.crl (hash: drOZi++EmJO0lPdIgkRljSRGNffVWEYnD8Wpa/IVd9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/559d63-afb3-41aa-b216-92f03d3dd412/1/tvPx-G3UyqCws3yYuhKCUKpJR0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/559d63-afb3-41aa-b216-92f03d3dd412/1/tvPx-G3UyqCws3yYuhKCUKpJR0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/tvPx-G3UyqCws3yYuhKCUKpJR0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7d:92:ad:bf:b7:33:2b:5c:cd:39:13:9a:11:d9:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6f3f1f86dd4caa0b0b37c98ba128250aa494745
Validity
Not Before: Sep 22 19:00:22 2026 GMT
Not After : Sep 23 19:00:22 2026 GMT
Subject: CN=d9c93329af00b8cb62d204a25e2aa73dba7bc796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:81:e4:19:e7:52:91:33:7f:c1:11:2c:c2:70:
3d:a4:1d:69:82:8d:57:59:d3:a2:55:7b:d1:ab:b4:
50:b1:dd:27:f5:bd:83:7f:fe:4c:48:57:1b:7b:5b:
c4:07:74:84:dc:00:6b:45:62:9c:43:b3:21:64:05:
5b:2e:08:eb:76:cc:0e:9c:73:44:64:d3:c8:5b:6c:
59:b5:89:fd:39:cc:a8:06:53:7d:dd:2a:5a:2b:46:
b3:36:14:b1:6f:bd:64:25:72:61:e9:1a:34:a5:34:
ab:7c:3a:03:1e:17:b9:36:af:34:8a:aa:d9:d5:e4:
2a:86:c8:51:0b:b5:93:ef:b6:71:0d:d5:df:ab:85:
86:9e:b3:4a:0a:b8:03:b5:2d:79:f0:b2:8b:1a:dd:
09:e6:79:b3:c7:30:54:27:90:85:55:ce:ea:60:3c:
64:9b:66:e4:a8:36:0c:c1:ba:59:95:14:c7:17:2a:
55:b8:f0:2d:ef:9e:04:08:e4:31:45:a9:40:56:79:
79:c2:d0:98:95:e7:b7:f3:ba:ba:73:bd:27:6a:d0:
ac:ee:ad:99:a3:e9:9d:2a:6a:48:ae:d3:05:62:f9:
e3:e2:2b:77:c5:5e:8a:2d:2b:03:19:d5:69:a4:73:
f3:dd:50:0e:40:60:c7:a8:25:f3:fd:53:6c:17:07:
04:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C9:33:29:AF:00:B8:CB:62:D2:04:A2:5E:2A:A7:3D:BA:7B:C7:96
X509v3 Authority Key Identifier:
keyid:B6:F3:F1:F8:6D:D4:CA:A0:B0:B3:7C:98:BA:12:82:50:AA:49:47:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvPx-G3UyqCws3yYuhKCUKpJR0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/559d63-afb3-41aa-b216-92f03d3dd412/1/tvPx-G3UyqCws3yYuhKCUKpJR0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/559d63-afb3-41aa-b216-92f03d3dd412/1/tvPx-G3UyqCws3yYuhKCUKpJR0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:17:ec:a5:ae:59:50:ec:aa:c0:80:cb:e5:1f:92:43:2f:37:
85:c5:0f:1e:ea:f9:ca:3d:86:1d:07:cf:67:cf:9a:63:19:cb:
61:8d:20:7a:43:44:6e:df:96:74:40:de:9e:fb:50:22:a4:3b:
2f:e6:f3:fa:86:59:16:d7:6c:78:7a:72:66:c2:29:1f:87:04:
49:dd:f0:01:34:76:7e:7f:f2:1a:80:a3:1d:50:92:9b:92:d5:
c1:71:ad:0b:d7:95:4b:0f:d1:b0:3f:4d:70:24:d8:02:5e:9f:
98:c8:69:ec:34:c4:29:bc:e8:56:0d:82:b7:b7:58:a3:75:1d:
e8:b0:86:81:69:1e:ed:b1:90:e5:13:34:bc:12:6d:32:f9:c5:
f8:ec:80:24:d1:3c:69:d4:f7:7c:8d:0f:96:59:a4:9b:f6:a7:
da:c3:5c:8d:78:cd:96:a0:77:33:d3:52:a4:c1:0b:ac:10:e2:
54:25:43:93:bf:90:a6:04:31:c2:ee:c2:35:88:09:5a:fb:bd:
29:50:d6:de:cb:39:4c:5a:d3:cd:74:b1:fb:86:71:b9:60:7d:
d8:0f:e5:0d:dc:2a:a7:e4:25:7e:68:3d:a4:b6:86:01:5d:8e:
7a:99:b3:1b:ea:2a:05:40:a7:bb:8c:39:76:4c:68:fc:71:91:
50:61:a5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:07:55 2026 by rpki-client